OpenVPN Not Responding to Client to Establish a Connection

shazzad0c

Hi guys,

I'm having some trouble getting my OpenVPN client on my iOS device (iPhone 6 running iOS 8.1, OpenVPN Client 1.0.5 Build 177) to establish a VPN connection over the internet to my CentOS 7 OpenVPN server.

I followed the guide http://www.unixmen.com/install-openvpn-centos-7 to install & configure OpenVPN on both the server & client.

I have disabled SELinux, iptables, and the CentOS/Redhat firewall.
All port forwarding on the router has been setup, using TCP & UDP ports 1194.

When attempting to connect to the server via the client within my home network, I am able to successfully connect to the VPN. However we trying to connect over the internet, the connection is not successful. I've tried using both TCP & UDP, and both have the same issues.

Running a tshark/tcpdump on the server shows requests from the client reaching the server, but the sever never responds back. Not sure why though?

TShark/TCP Dump on CentOS Server - TCP Protocol
    1   0.000000 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 32300 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661078115 TSecr=0 SACK_PERM=1
1   2   0.999062 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 [TCP Retransmission] 32300 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661079116 TSecr=0 SACK_PERM=1
2   3   2.000627 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 [TCP Retransmission] 32300 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661080117 TSecr=0 SACK_PERM=1
3   4   2.979402 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 [TCP Retransmission] 32300 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661081118 TSecr=0 SACK_PERM=1
4   5   3.958193 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 [TCP Retransmission] 32300 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661082119 TSecr=0 SACK_PERM=1
5   6   6.015174 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 [TCP Retransmission] 32300 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661084120 TSecr=0 SACK_PERM=1
6   7   9.015615 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 32301 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661087120 TSecr=0 SACK_PERM=1
7   8   9.998128 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 [TCP Retransmission] 32301 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661088120 TSecr=0 SACK_PERM=1
8   9  10.934245 xxx.xxx.xxx.xxx -> 192.168.0.36 TCP 80 [TCP Retransmission] 32301 > openvpn [SYN] Seq=0 Win=65535 Len=0 MSS=1394 WS=32 TSval=661089121 TSecr=0 SACK_PERM=1

TShark/TCP Dump on CentOS Server - UDP Protocol
    1   0.000000 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
1   2   2.000302 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
2   3   4.020324 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
3   4   6.020479 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
4   5   8.007758 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
5   6  10.020471 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
6   7  12.040628 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
7   8  14.020245 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2
8   9  16.020513 xxx.xxx.xxx.xxx -> 192.168.0.36 OpenVPN 62 MessageType: P_CONTROL_HARD_RESET_CLIENT_V2

iOS OpenVPN client logs also do not provide much information. See below (both TCP & UPD provided):

Client Log - TCP

2015-04-16 00:39:53 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2015-04-16 00:39:53 UNUSED OPTIONS
4 [resolv-retry] [infinite] 
5 [nobind] 
6 [persist-key] 
7 [persist-tun] 
13 [verb] [3] 

2015-04-16 00:39:53 LZO-ASYM init swap=0 asym=0
2015-04-16 00:39:53 EVENT: RESOLVE
2015-04-16 00:39:53 Contacting zzz.zzz.zzz.zzz:1194 via TCP
2015-04-16 00:39:53 EVENT: WAIT
2015-04-16 00:39:53 SetTunnelSocket returned 1
2015-04-16 00:40:03 Server poll timeout, trying next remote entry...
2015-04-16 00:40:03 EVENT: RECONNECTING
2015-04-16 00:40:03 LZO-ASYM init swap=0 asym=0
2015-04-16 00:40:03 EVENT: RESOLVE
2015-04-16 00:40:03 Contacting zzz.zzz.zzz.zzz:1194 via TCP
2015-04-16 00:40:03 EVENT: WAIT
2015-04-16 00:40:03 SetTunnelSocket returned 1
2015-04-16 00:40:13 Server poll timeout, trying next remote entry...
2015-04-16 00:40:13 EVENT: RECONNECTING
2015-04-16 00:40:13 LZO-ASYM init swap=0 asym=0
2015-04-16 00:40:13 EVENT: RESOLVE
2015-04-16 00:40:13 Contacting zzz.zzz.zzz.zzz:1194 via TCP
2015-04-16 00:40:13 EVENT: WAIT
2015-04-16 00:40:13 SetTunnelSocket returned 1
2015-04-16 00:40:23 Server poll timeout, trying next remote entry...
2015-04-16 00:40:23 EVENT: RECONNECTING
2015-04-16 00:40:23 LZO-ASYM init swap=0 asym=0
2015-04-16 00:40:23 EVENT: RESOLVE
2015-04-16 00:40:23 Contacting zzz.zzz.zzz.zzz:1194 via TCP
2015-04-16 00:40:23 EVENT: WAIT
2015-04-16 00:40:23 SetTunnelSocket returned 1
2015-04-16 00:40:33 Server poll timeout, trying next remote entry...
2015-04-16 00:40:33 EVENT: RECONNECTING
2015-04-16 00:40:33 LZO-ASYM init swap=0 asym=0
2015-04-16 00:40:33 EVENT: RESOLVE
2015-04-16 00:40:33 Contacting zzz.zzz.zzz.zzz:1194 via TCP
2015-04-16 00:40:33 EVENT: WAIT
2015-04-16 00:40:33 SetTunnelSocket returned 1
2015-04-16 00:40:43 Server poll timeout, trying next remote entry...
2015-04-16 00:40:43 EVENT: RECONNECTING
2015-04-16 00:40:43 LZO-ASYM init swap=0 asym=0
2015-04-16 00:40:43 EVENT: RESOLVE
2015-04-16 00:40:43 Contacting zzz.zzz.zzz.zzz:1194 via TCP
2015-04-16 00:40:43 EVENT: WAIT
2015-04-16 00:40:43 SetTunnelSocket returned 1
2015-04-16 00:40:53 EVENT: CONNECTION_TIMEOUT [ERR]
2015-04-16 00:40:53 EVENT: DISCONNECTED
2015-04-16 00:40:53 Raw stats on disconnect:
  CONNECTION_TIMEOUT : 1
  N_RECONNECT : 5
2015-04-16 00:40:53 Performance stats on disconnect:
  CPU usage (microseconds): 43550
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0
2015-04-16 00:40:53 EVENT: DISCONNECT_PENDING
2015-04-16 00:40:53 ----- OpenVPN Stop -----

Client Log - UDP
2015-04-16 00:50:01 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2015-04-16 00:50:01 UNUSED OPTIONS
4 [resolv-retry] [infinite] 
5 [nobind] 
6 [persist-key] 
7 [persist-tun] 
13 [verb] [3] 

2015-04-16 00:50:01 LZO-ASYM init swap=0 asym=0
2015-04-16 00:50:01 EVENT: RESOLVE
2015-04-16 00:50:01 Contacting zzz.zzz.zzz.zzz:1194 via UDP
2015-04-16 00:50:01 EVENT: WAIT
2015-04-16 00:50:01 SetTunnelSocket returned 1
2015-04-16 00:50:01 Connecting to zzz.zzz.zzz.zzz:1194 (zzz.zzz.zzz.zzz) via UDPv4
2015-04-16 00:50:11 Server poll timeout, trying next remote entry...
2015-04-16 00:50:11 EVENT: RECONNECTING
2015-04-16 00:50:11 LZO-ASYM init swap=0 asym=0
2015-04-16 00:50:11 EVENT: RESOLVE
2015-04-16 00:50:11 Contacting zzz.zzz.zzz.zzz:1194 via UDP
2015-04-16 00:50:11 EVENT: WAIT
2015-04-16 00:50:11 SetTunnelSocket returned 1
2015-04-16 00:50:11 Connecting to zzz.zzz.zzz.zzz:1194 (zzz.zzz.zzz.zzz) via UDPv4
2015-04-16 00:50:21 Server poll timeout, trying next remote entry...
2015-04-16 00:50:21 EVENT: RECONNECTING
2015-04-16 00:50:21 LZO-ASYM init swap=0 asym=0
2015-04-16 00:50:21 EVENT: RESOLVE
2015-04-16 00:50:21 Contacting zzz.zzz.zzz.zzz:1194 via UDP
2015-04-16 00:50:21 EVENT: WAIT
2015-04-16 00:50:21 SetTunnelSocket returned 1
2015-04-16 00:50:21 Connecting to zzz.zzz.zzz.zzz:1194 (zzz.zzz.zzz.zzz) via UDPv4
2015-04-16 00:50:29 EVENT: DISCONNECTED
2015-04-16 00:50:29 Raw stats on disconnect:
  BYTES_OUT : 210
  PACKETS_OUT : 15
  N_RECONNECT : 2
2015-04-16 00:50:29 Performance stats on disconnect:
  CPU usage (microseconds): 23199
  Network bytes per CPU second: 9052
  Tunnel bytes per CPU second: 0
2015-04-16 00:50:29 ----- OpenVPN Stop -----

Server config file is as follows (with the only difference between UDP/TCP is the protocol):

local 192.168.0.36
port 1194
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key  # This file should be kept secret
dh /etc/openvpn/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.10.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
duplicate-cn
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append  /var/log/openvpn.log
verb 6

I don't really know where to from here... I've been pulling my hair out about this for over a week, so now I felt the need to ask for some help. Any assistance would be greatly appreciated.

During the time the client is attempting to connect to the server, the OpenVPN server logs do not show any information (even on verb 6). The only logs from the server are when the OpenVPN service is restarted... see below:

OpenVPN Server Log - TCP

Wed Apr 15 13:12:49 2015 us=242428 event_wait : Interrupted system call (code=4)
Wed Apr 15 13:12:49 2015 us=244345 TCP/UDP: Closing socket
Wed Apr 15 13:12:49 2015 us=244703 /usr/sbin/ip route del 10.8.0.0/24
RTNETLINK answers: Operation not permitted
Wed Apr 15 13:12:49 2015 us=252888 ERROR: Linux route delete command failed: external program exited with error status: 2
Wed Apr 15 13:12:49 2015 us=252980 Closing TUN/TAP interface
Wed Apr 15 13:12:49 2015 us=253039 /usr/sbin/ip addr del dev tun0 local 10.8.0.1 peer 10.8.0.2
RTNETLINK answers: Operation not permitted
Wed Apr 15 13:12:49 2015 us=255264 Linux ip addr del failed: external program exited with error status: 2
Wed Apr 15 13:12:49 2015 us=269870 SIGTERM[hard,] received, process exiting
Wed Apr 15 13:12:49 2015 us=304169 Current Parameter Settings:
Wed Apr 15 13:12:49 2015 us=304314   config = 'server.conf'
Wed Apr 15 13:12:49 2015 us=304336   mode = 1
Wed Apr 15 13:12:49 2015 us=304351   persist_config = DISABLED
Wed Apr 15 13:12:49 2015 us=304365   persist_mode = 1
Wed Apr 15 13:12:49 2015 us=304378   show_ciphers = DISABLED
Wed Apr 15 13:12:49 2015 us=304391   show_digests = DISABLED
Wed Apr 15 13:12:49 2015 us=304404   show_engines = DISABLED
Wed Apr 15 13:12:49 2015 us=304417   genkey = DISABLED
Wed Apr 15 13:12:49 2015 us=304430   key_pass_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304443   show_tls_ciphers = DISABLED
Wed Apr 15 13:12:49 2015 us=304460 Connection profiles [default]:
Wed Apr 15 13:12:49 2015 us=304476   proto = tcp-server
Wed Apr 15 13:12:49 2015 us=304489   local = '192.168.0.36'
Wed Apr 15 13:12:49 2015 us=304503   local_port = 1194
Wed Apr 15 13:12:49 2015 us=304516   remote = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304530   remote_port = 1194
Wed Apr 15 13:12:49 2015 us=304542   remote_float = DISABLED
Wed Apr 15 13:12:49 2015 us=304555   bind_defined = DISABLED
Wed Apr 15 13:12:49 2015 us=304568   bind_local = ENABLED
Wed Apr 15 13:12:49 2015 us=304582   connect_retry_seconds = 5
Wed Apr 15 13:12:49 2015 us=304595   connect_timeout = 10
Wed Apr 15 13:12:49 2015 us=304608   connect_retry_max = 0
Wed Apr 15 13:12:49 2015 us=304622   socks_proxy_server = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304635   socks_proxy_port = 0
Wed Apr 15 13:12:49 2015 us=304648   socks_proxy_retry = DISABLED
Wed Apr 15 13:12:49 2015 us=304661   tun_mtu = 1500
Wed Apr 15 13:12:49 2015 us=304673   tun_mtu_defined = ENABLED
Wed Apr 15 13:12:49 2015 us=304687   link_mtu = 1500
Wed Apr 15 13:12:49 2015 us=304700   link_mtu_defined = DISABLED
Wed Apr 15 13:12:49 2015 us=304713   tun_mtu_extra = 0
Wed Apr 15 13:12:49 2015 us=304726   tun_mtu_extra_defined = DISABLED
Wed Apr 15 13:12:49 2015 us=304739   mtu_discover_type = -1
Wed Apr 15 13:12:49 2015 us=304753   fragment = 0
Wed Apr 15 13:12:49 2015 us=304766   mssfix = 1450
Wed Apr 15 13:12:49 2015 us=304779   explicit_exit_notification = 0
Wed Apr 15 13:12:49 2015 us=304795 Connection profiles END
Wed Apr 15 13:12:49 2015 us=304809   remote_random = DISABLED
Wed Apr 15 13:12:49 2015 us=304822   ipchange = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304835   dev = 'tun'
Wed Apr 15 13:12:49 2015 us=304848   dev_type = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304861   dev_node = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304873   lladdr = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304886   topology = 1
Wed Apr 15 13:12:49 2015 us=304899   tun_ipv6 = DISABLED
Wed Apr 15 13:12:49 2015 us=304912   ifconfig_local = '10.8.0.1'
Wed Apr 15 13:12:49 2015 us=304925   ifconfig_remote_netmask = '10.8.0.2'
Wed Apr 15 13:12:49 2015 us=304938   ifconfig_noexec = DISABLED
Wed Apr 15 13:12:49 2015 us=304951   ifconfig_nowarn = DISABLED
Wed Apr 15 13:12:49 2015 us=304964   ifconfig_ipv6_local = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=304977   ifconfig_ipv6_netbits = 0
Wed Apr 15 13:12:49 2015 us=304990   ifconfig_ipv6_remote = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305031   shaper = 0
Wed Apr 15 13:12:49 2015 us=305046   mtu_test = 0
Wed Apr 15 13:12:49 2015 us=305112   mlock = DISABLED
Wed Apr 15 13:12:49 2015 us=305128   keepalive_ping = 10
Wed Apr 15 13:12:49 2015 us=305141   keepalive_timeout = 120
Wed Apr 15 13:12:49 2015 us=305155   inactivity_timeout = 0
Wed Apr 15 13:12:49 2015 us=305167   ping_send_timeout = 10
Wed Apr 15 13:12:49 2015 us=305181   ping_rec_timeout = 240
Wed Apr 15 13:12:49 2015 us=305193   ping_rec_timeout_action = 2
Wed Apr 15 13:12:49 2015 us=305206   ping_timer_remote = DISABLED
Wed Apr 15 13:12:49 2015 us=305219   remap_sigusr1 = 0
Wed Apr 15 13:12:49 2015 us=305232   persist_tun = ENABLED
Wed Apr 15 13:12:49 2015 us=305245   persist_local_ip = DISABLED
Wed Apr 15 13:12:49 2015 us=305259   persist_remote_ip = DISABLED
Wed Apr 15 13:12:49 2015 us=305271   persist_key = ENABLED
Wed Apr 15 13:12:49 2015 us=305284   passtos = DISABLED
Wed Apr 15 13:12:49 2015 us=305298   resolve_retry_seconds = 1000000000
Wed Apr 15 13:12:49 2015 us=305311   username = 'nobody'
Wed Apr 15 13:12:49 2015 us=305324   groupname = 'nobody'
Wed Apr 15 13:12:49 2015 us=305337   chroot_dir = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305350   cd_dir = '/etc/openvpn/'
Wed Apr 15 13:12:49 2015 us=305363   writepid = '/var/run/openvpn/server.pid'
Wed Apr 15 13:12:49 2015 us=305376   up_script = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305389   down_script = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305402   down_pre = DISABLED
Wed Apr 15 13:12:49 2015 us=305415   up_restart = DISABLED
Wed Apr 15 13:12:49 2015 us=305428   up_delay = DISABLED
Wed Apr 15 13:12:49 2015 us=305441   daemon = ENABLED
Wed Apr 15 13:12:49 2015 us=305454   inetd = 0
Wed Apr 15 13:12:49 2015 us=305467   log = ENABLED
Wed Apr 15 13:12:49 2015 us=305480   suppress_timestamps = DISABLED
Wed Apr 15 13:12:49 2015 us=305493   nice = 0
Wed Apr 15 13:12:49 2015 us=305506   verbosity = 6
Wed Apr 15 13:12:49 2015 us=305519   mute = 0
Wed Apr 15 13:12:49 2015 us=305532   gremlin = 0
Wed Apr 15 13:12:49 2015 us=305549   status_file = 'openvpn-status.log'
Wed Apr 15 13:12:49 2015 us=305562   status_file_version = 1
Wed Apr 15 13:12:49 2015 us=305576   status_file_update_freq = 60
Wed Apr 15 13:12:49 2015 us=305589   occ = ENABLED
Wed Apr 15 13:12:49 2015 us=305602   rcvbuf = 65536
Wed Apr 15 13:12:49 2015 us=305615   sndbuf = 65536
Wed Apr 15 13:12:49 2015 us=305629   mark = 0
Wed Apr 15 13:12:49 2015 us=305642   sockflags = 0
Wed Apr 15 13:12:49 2015 us=305655   fast_io = DISABLED
Wed Apr 15 13:12:49 2015 us=305668   lzo = 7
Wed Apr 15 13:12:49 2015 us=305686   route_script = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305700   route_default_gateway = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305713   route_default_metric = 0
Wed Apr 15 13:12:49 2015 us=305726   route_noexec = DISABLED
Wed Apr 15 13:12:49 2015 us=305739   route_delay = 0
Wed Apr 15 13:12:49 2015 us=305752   route_delay_window = 30
Wed Apr 15 13:12:49 2015 us=305766   route_delay_defined = DISABLED
Wed Apr 15 13:12:49 2015 us=305779   route_nopull = DISABLED
Wed Apr 15 13:12:49 2015 us=305792   route_gateway_via_dhcp = DISABLED
Wed Apr 15 13:12:49 2015 us=305805   max_routes = 100
Wed Apr 15 13:12:49 2015 us=305818   allow_pull_fqdn = DISABLED
Wed Apr 15 13:12:49 2015 us=305832   route 10.8.0.0/255.255.255.0/nil/nil
Wed Apr 15 13:12:49 2015 us=305846   management_addr = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305859   management_port = 0
Wed Apr 15 13:12:49 2015 us=305872   management_user_pass = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305885   management_log_history_cache = 250
Wed Apr 15 13:12:49 2015 us=305899   management_echo_buffer_size = 100
Wed Apr 15 13:12:49 2015 us=305912   management_write_peer_info_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305925   management_client_user = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305939   management_client_group = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305952   management_flags = 0
Wed Apr 15 13:12:49 2015 us=305970   shared_secret_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=305983   key_direction = 0
Wed Apr 15 13:12:49 2015 us=306003   ciphername_defined = ENABLED
Wed Apr 15 13:12:49 2015 us=306017   ciphername = 'BF-CBC'
Wed Apr 15 13:12:49 2015 us=306030   authname_defined = ENABLED
Wed Apr 15 13:12:49 2015 us=306044   authname = 'SHA1'
Wed Apr 15 13:12:49 2015 us=306105   prng_hash = 'SHA1'
Wed Apr 15 13:12:49 2015 us=306126   prng_nonce_secret_len = 16
Wed Apr 15 13:12:49 2015 us=306140   keysize = 0
Wed Apr 15 13:12:49 2015 us=306153   engine = DISABLED
Wed Apr 15 13:12:49 2015 us=306166   replay = ENABLED
Wed Apr 15 13:12:49 2015 us=306179   mute_replay_warnings = DISABLED
Wed Apr 15 13:12:49 2015 us=306192   replay_window = 64
Wed Apr 15 13:12:49 2015 us=306205   replay_time = 15
Wed Apr 15 13:12:49 2015 us=306218   packet_id_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306230   use_iv = ENABLED
Wed Apr 15 13:12:49 2015 us=306243   test_crypto = DISABLED
Wed Apr 15 13:12:49 2015 us=306256   tls_server = ENABLED
Wed Apr 15 13:12:49 2015 us=306269   tls_client = DISABLED
Wed Apr 15 13:12:49 2015 us=306282   key_method = 2
Wed Apr 15 13:12:49 2015 us=306295   ca_file = 'ca.crt'
Wed Apr 15 13:12:49 2015 us=306307   ca_path = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306320   dh_file = 'dh2048.pem'
Wed Apr 15 13:12:49 2015 us=306334   cert_file = 'server.crt'
Wed Apr 15 13:12:49 2015 us=306347   priv_key_file = 'server.key'
Wed Apr 15 13:12:49 2015 us=306360   pkcs12_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306373   cipher_list = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306386   tls_verify = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306399   tls_export_cert = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306412   verify_x509_type = 0
Wed Apr 15 13:12:49 2015 us=306425   verify_x509_name = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306437   crl_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306450   ns_cert_type = 0
Wed Apr 15 13:12:49 2015 us=306466   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306479   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306492   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306505   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306518   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306531   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306544   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306557   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306569   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306582   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306595   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306608   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306621   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306633   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306646   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306659   remote_cert_ku[i] = 0
Wed Apr 15 13:12:49 2015 us=306671   remote_cert_eku = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306684   ssl_flags = 0
Wed Apr 15 13:12:49 2015 us=306697   tls_timeout = 2
Wed Apr 15 13:12:49 2015 us=306710   renegotiate_bytes = 0
Wed Apr 15 13:12:49 2015 us=306723   renegotiate_packets = 0
Wed Apr 15 13:12:49 2015 us=306735   renegotiate_seconds = 3600
Wed Apr 15 13:12:49 2015 us=306748   handshake_window = 60
Wed Apr 15 13:12:49 2015 us=306761   transition_window = 3600
Wed Apr 15 13:12:49 2015 us=306774   single_session = DISABLED
Wed Apr 15 13:12:49 2015 us=306787   push_peer_info = DISABLED
Wed Apr 15 13:12:49 2015 us=306800   tls_exit = DISABLED
Wed Apr 15 13:12:49 2015 us=306813   tls_auth_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=306827   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306840   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306853   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306866   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306879   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306892   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306905   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306918   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306939   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306953   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306966   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306979   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=306993   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=307006   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=307019   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=307032   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:12:49 2015 us=307047   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307092   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307107   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307120   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307133   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307146   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307159   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307172   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307186   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307198   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307212   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307225   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307238   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307251   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307264   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307277   pkcs11_private_mode = 00000000
Wed Apr 15 13:12:49 2015 us=307290   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307303   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307316   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307329   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307342   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307354   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307367   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307380   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307393   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307406   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307419   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307432   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307445   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307457   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307471   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307484   pkcs11_cert_private = DISABLED
Wed Apr 15 13:12:49 2015 us=307497   pkcs11_pin_cache_period = -1
Wed Apr 15 13:12:49 2015 us=307511   pkcs11_id = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=307524   pkcs11_id_management = DISABLED
Wed Apr 15 13:12:49 2015 us=307540   server_network = 10.8.0.0
Wed Apr 15 13:12:49 2015 us=307555   server_netmask = 255.255.255.0
Wed Apr 15 13:12:49 2015 us=307572   server_network_ipv6 = ::
Wed Apr 15 13:12:49 2015 us=307585   server_netbits_ipv6 = 0
Wed Apr 15 13:12:49 2015 us=307599   server_bridge_ip = 0.0.0.0
Wed Apr 15 13:12:49 2015 us=307614   server_bridge_netmask = 0.0.0.0
Wed Apr 15 13:12:49 2015 us=307628   server_bridge_pool_start = 0.0.0.0
Wed Apr 15 13:12:49 2015 us=307643   server_bridge_pool_end = 0.0.0.0
Wed Apr 15 13:12:49 2015 us=307656   push_entry = 'route 192.168.10.0 255.255.255.0'
Wed Apr 15 13:12:49 2015 us=307670   push_entry = 'redirect-gateway def1 bypass-dhcp'
Wed Apr 15 13:12:49 2015 us=307683   push_entry = 'dhcp-option DNS 8.8.8.8'
Wed Apr 15 13:12:49 2015 us=307696   push_entry = 'dhcp-option DNS 8.8.4.4'
Wed Apr 15 13:12:49 2015 us=307710   push_entry = 'route 10.8.0.1'
Wed Apr 15 13:12:49 2015 us=307723   push_entry = 'topology net30'
Wed Apr 15 13:12:49 2015 us=307736   push_entry = 'ping 10'
Wed Apr 15 13:12:49 2015 us=307757   push_entry = 'ping-restart 120'
Wed Apr 15 13:12:49 2015 us=307771   ifconfig_pool_defined = ENABLED
Wed Apr 15 13:12:49 2015 us=307786   ifconfig_pool_start = 10.8.0.4
Wed Apr 15 13:12:49 2015 us=307800   ifconfig_pool_end = 10.8.0.251
Wed Apr 15 13:12:49 2015 us=307820   ifconfig_pool_netmask = 0.0.0.0
Wed Apr 15 13:12:49 2015 us=307835   ifconfig_pool_persist_filename = 'ipp.txt'
Wed Apr 15 13:12:49 2015 us=307849   ifconfig_pool_persist_refresh_freq = 600
Wed Apr 15 13:12:49 2015 us=307863   ifconfig_ipv6_pool_defined = DISABLED
Wed Apr 15 13:12:49 2015 us=307878   ifconfig_ipv6_pool_base = ::
Wed Apr 15 13:12:49 2015 us=307891   ifconfig_ipv6_pool_netbits = 0
Wed Apr 15 13:12:49 2015 us=307904   n_bcast_buf = 256
Wed Apr 15 13:12:49 2015 us=307917   tcp_queue_limit = 64
Wed Apr 15 13:12:49 2015 us=307930   real_hash_size = 256
Wed Apr 15 13:12:49 2015 us=307943   virtual_hash_size = 256
Wed Apr 15 13:12:49 2015 us=307955   client_connect_script = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=307968   learn_address_script = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=307981   client_disconnect_script = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=307995   client_config_dir = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=308008   ccd_exclusive = DISABLED
Wed Apr 15 13:12:49 2015 us=308021   tmp_dir = '/tmp'
Wed Apr 15 13:12:49 2015 us=308035   push_ifconfig_defined = DISABLED
Wed Apr 15 13:12:49 2015 us=308050   push_ifconfig_local = 0.0.0.0
Wed Apr 15 13:12:49 2015 us=308097   push_ifconfig_remote_netmask = 0.0.0.0
Wed Apr 15 13:12:49 2015 us=308111   push_ifconfig_ipv6_defined = DISABLED
Wed Apr 15 13:12:49 2015 us=308126   push_ifconfig_ipv6_local = ::/0
Wed Apr 15 13:12:49 2015 us=308141   push_ifconfig_ipv6_remote = ::
Wed Apr 15 13:12:49 2015 us=308154   enable_c2c = DISABLED
Wed Apr 15 13:12:49 2015 us=308168   duplicate_cn = ENABLED
Wed Apr 15 13:12:49 2015 us=308181   cf_max = 0
Wed Apr 15 13:12:49 2015 us=308194   cf_per = 0
Wed Apr 15 13:12:49 2015 us=308207   max_clients = 1024
Wed Apr 15 13:12:49 2015 us=308220   max_routes_per_client = 256
Wed Apr 15 13:12:49 2015 us=308233   auth_user_pass_verify_script = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=308247   auth_user_pass_verify_script_via_file = DISABLED
Wed Apr 15 13:12:49 2015 us=308260   port_share_host = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=308273   port_share_port = 0
Wed Apr 15 13:12:49 2015 us=308286   client = DISABLED
Wed Apr 15 13:12:49 2015 us=308299   pull = DISABLED
Wed Apr 15 13:12:49 2015 us=308312   auth_user_pass_file = '[UNDEF]'
Wed Apr 15 13:12:49 2015 us=308329 OpenVPN 2.3.6 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec  2 2014
Wed Apr 15 13:12:49 2015 us=308354 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Wed Apr 15 13:12:49 2015 us=308605 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Wed Apr 15 13:12:49 2015 us=308829 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Wed Apr 15 13:12:49 2015 us=328280 Diffie-Hellman initialized with 2048 bit key
Wed Apr 15 13:12:49 2015 us=329637 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Apr 15 13:12:49 2015 us=329722 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed Apr 15 13:12:49 2015 us=329962 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:74:07:be
Wed Apr 15 13:12:49 2015 us=330394 TUN/TAP device tun0 opened
Wed Apr 15 13:12:49 2015 us=330433 TUN/TAP TX queue length set to 100
Wed Apr 15 13:12:49 2015 us=330457 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 15 13:12:49 2015 us=330499 /usr/sbin/ip link set dev tun0 up mtu 1500
Wed Apr 15 13:12:49 2015 us=339529 /usr/sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Wed Apr 15 13:12:49 2015 us=342019 /usr/sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Apr 15 13:12:49 2015 us=352148 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 15 13:12:49 2015 us=399866 GID set to nobody
Wed Apr 15 13:12:49 2015 us=400018 UID set to nobody
Wed Apr 15 13:12:49 2015 us=400119 Listening for incoming TCP connection on [AF_INET]192.168.0.36:1194
Wed Apr 15 13:12:49 2015 us=400170 TCPv4_SERVER link local (bound): [AF_INET]192.168.0.36:1194
Wed Apr 15 13:12:49 2015 us=400186 TCPv4_SERVER link remote: [undef]
Wed Apr 15 13:12:49 2015 us=400209 MULTI: multi_init called, r=256 v=256
Wed Apr 15 13:12:49 2015 us=400325 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Apr 15 13:12:49 2015 us=400356 IFCONFIG POOL LIST
Wed Apr 15 13:12:49 2015 us=400403 MULTI: TCP INIT maxclients=1024 maxevents=1028
Wed Apr 15 13:12:49 2015 us=400478 Initialization Sequence Completed
Wed Apr 15 13:33:40 2015 us=537733 TCP/UDP: Closing socket
Wed Apr 15 13:33:40 2015 us=538164 /usr/sbin/ip route del 10.8.0.0/24
RTNETLINK answers: Operation not permitted
Wed Apr 15 13:33:40 2015 us=544157 ERROR: Linux route delete command failed: external program exited with error status: 2
Wed Apr 15 13:33:40 2015 us=544250 Closing TUN/TAP interface
Wed Apr 15 13:33:40 2015 us=544301 /usr/sbin/ip addr del dev tun0 local 10.8.0.1 peer 10.8.0.2
RTNETLINK answers: Operation not permitted
Wed Apr 15 13:33:40 2015 us=549662 Linux ip addr del failed: external program exited with error status: 2
Wed Apr 15 13:33:40 2015 us=560896 SIGTERM[hard,] received, process exiting
Wed Apr 15 13:33:40 2015 us=593138 Current Parameter Settings:
Wed Apr 15 13:33:40 2015 us=593289   config = 'server.conf'
Wed Apr 15 13:33:40 2015 us=593312   mode = 1
Wed Apr 15 13:33:40 2015 us=593326   persist_config = DISABLED
Wed Apr 15 13:33:40 2015 us=593340   persist_mode = 1
Wed Apr 15 13:33:40 2015 us=593353   show_ciphers = DISABLED
Wed Apr 15 13:33:40 2015 us=593366   show_digests = DISABLED
Wed Apr 15 13:33:40 2015 us=593379   show_engines = DISABLED
Wed Apr 15 13:33:40 2015 us=593392   genkey = DISABLED
Wed Apr 15 13:33:40 2015 us=593405   key_pass_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593418   show_tls_ciphers = DISABLED
Wed Apr 15 13:33:40 2015 us=593435 Connection profiles [default]:
Wed Apr 15 13:33:40 2015 us=593451   proto = tcp-server
Wed Apr 15 13:33:40 2015 us=593464   local = '192.168.0.36'
Wed Apr 15 13:33:40 2015 us=593478   local_port = 1194
Wed Apr 15 13:33:40 2015 us=593492   remote = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593505   remote_port = 1194
Wed Apr 15 13:33:40 2015 us=593518   remote_float = DISABLED
Wed Apr 15 13:33:40 2015 us=593531   bind_defined = DISABLED
Wed Apr 15 13:33:40 2015 us=593544   bind_local = ENABLED
Wed Apr 15 13:33:40 2015 us=593557   connect_retry_seconds = 5
Wed Apr 15 13:33:40 2015 us=593571   connect_timeout = 10
Wed Apr 15 13:33:40 2015 us=593584   connect_retry_max = 0
Wed Apr 15 13:33:40 2015 us=593598   socks_proxy_server = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593611   socks_proxy_port = 0
Wed Apr 15 13:33:40 2015 us=593624   socks_proxy_retry = DISABLED
Wed Apr 15 13:33:40 2015 us=593638   tun_mtu = 1500
Wed Apr 15 13:33:40 2015 us=593650   tun_mtu_defined = ENABLED
Wed Apr 15 13:33:40 2015 us=593663   link_mtu = 1500
Wed Apr 15 13:33:40 2015 us=593676   link_mtu_defined = DISABLED
Wed Apr 15 13:33:40 2015 us=593689   tun_mtu_extra = 0
Wed Apr 15 13:33:40 2015 us=593702   tun_mtu_extra_defined = DISABLED
Wed Apr 15 13:33:40 2015 us=593715   mtu_discover_type = -1
Wed Apr 15 13:33:40 2015 us=593729   fragment = 0
Wed Apr 15 13:33:40 2015 us=593742   mssfix = 1450
Wed Apr 15 13:33:40 2015 us=593755   explicit_exit_notification = 0
Wed Apr 15 13:33:40 2015 us=593771 Connection profiles END
Wed Apr 15 13:33:40 2015 us=593784   remote_random = DISABLED
Wed Apr 15 13:33:40 2015 us=593797   ipchange = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593810   dev = 'tun'
Wed Apr 15 13:33:40 2015 us=593823   dev_type = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593836   dev_node = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593849   lladdr = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593862   topology = 1
Wed Apr 15 13:33:40 2015 us=593874   tun_ipv6 = DISABLED
Wed Apr 15 13:33:40 2015 us=593927   ifconfig_local = '10.8.0.1'
Wed Apr 15 13:33:40 2015 us=593943   ifconfig_remote_netmask = '10.8.0.2'
Wed Apr 15 13:33:40 2015 us=593956   ifconfig_noexec = DISABLED
Wed Apr 15 13:33:40 2015 us=593969   ifconfig_nowarn = DISABLED
Wed Apr 15 13:33:40 2015 us=593982   ifconfig_ipv6_local = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=593995   ifconfig_ipv6_netbits = 0
Wed Apr 15 13:33:40 2015 us=594008   ifconfig_ipv6_remote = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594021   shaper = 0
Wed Apr 15 13:33:40 2015 us=594035   mtu_test = 0
Wed Apr 15 13:33:40 2015 us=594047   mlock = DISABLED
Wed Apr 15 13:33:40 2015 us=594097   keepalive_ping = 10
Wed Apr 15 13:33:40 2015 us=594112   keepalive_timeout = 120
Wed Apr 15 13:33:40 2015 us=594125   inactivity_timeout = 0
Wed Apr 15 13:33:40 2015 us=594138   ping_send_timeout = 10
Wed Apr 15 13:33:40 2015 us=594150   ping_rec_timeout = 240
Wed Apr 15 13:33:40 2015 us=594163   ping_rec_timeout_action = 2
Wed Apr 15 13:33:40 2015 us=594176   ping_timer_remote = DISABLED
Wed Apr 15 13:33:40 2015 us=594189   remap_sigusr1 = 0
Wed Apr 15 13:33:40 2015 us=594202   persist_tun = ENABLED
Wed Apr 15 13:33:40 2015 us=594215   persist_local_ip = DISABLED
Wed Apr 15 13:33:40 2015 us=594228   persist_remote_ip = DISABLED
Wed Apr 15 13:33:40 2015 us=594240   persist_key = ENABLED
Wed Apr 15 13:33:40 2015 us=594253   passtos = DISABLED
Wed Apr 15 13:33:40 2015 us=594266   resolve_retry_seconds = 1000000000
Wed Apr 15 13:33:40 2015 us=594280   username = 'nobody'
Wed Apr 15 13:33:40 2015 us=594292   groupname = 'nobody'
Wed Apr 15 13:33:40 2015 us=594305   chroot_dir = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594318   cd_dir = '/etc/openvpn/'
Wed Apr 15 13:33:40 2015 us=594331   writepid = '/var/run/openvpn/server.pid'
Wed Apr 15 13:33:40 2015 us=594344   up_script = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594357   down_script = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594370   down_pre = DISABLED
Wed Apr 15 13:33:40 2015 us=594383   up_restart = DISABLED
Wed Apr 15 13:33:40 2015 us=594396   up_delay = DISABLED
Wed Apr 15 13:33:40 2015 us=594409   daemon = ENABLED
Wed Apr 15 13:33:40 2015 us=594422   inetd = 0
Wed Apr 15 13:33:40 2015 us=594435   log = ENABLED
Wed Apr 15 13:33:40 2015 us=594448   suppress_timestamps = DISABLED
Wed Apr 15 13:33:40 2015 us=594461   nice = 0
Wed Apr 15 13:33:40 2015 us=594474   verbosity = 6
Wed Apr 15 13:33:40 2015 us=594487   mute = 0
Wed Apr 15 13:33:40 2015 us=594500   gremlin = 0
Wed Apr 15 13:33:40 2015 us=594516   status_file = 'openvpn-status.log'
Wed Apr 15 13:33:40 2015 us=594530   status_file_version = 1
Wed Apr 15 13:33:40 2015 us=594543   status_file_update_freq = 60
Wed Apr 15 13:33:40 2015 us=594556   occ = ENABLED
Wed Apr 15 13:33:40 2015 us=594569   rcvbuf = 65536
Wed Apr 15 13:33:40 2015 us=594582   sndbuf = 65536
Wed Apr 15 13:33:40 2015 us=594595   mark = 0
Wed Apr 15 13:33:40 2015 us=594608   sockflags = 0
Wed Apr 15 13:33:40 2015 us=594620   fast_io = DISABLED
Wed Apr 15 13:33:40 2015 us=594639   lzo = 7
Wed Apr 15 13:33:40 2015 us=594653   route_script = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594667   route_default_gateway = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594679   route_default_metric = 0
Wed Apr 15 13:33:40 2015 us=594693   route_noexec = DISABLED
Wed Apr 15 13:33:40 2015 us=594706   route_delay = 0
Wed Apr 15 13:33:40 2015 us=594719   route_delay_window = 30
Wed Apr 15 13:33:40 2015 us=594733   route_delay_defined = DISABLED
Wed Apr 15 13:33:40 2015 us=594745   route_nopull = DISABLED
Wed Apr 15 13:33:40 2015 us=594759   route_gateway_via_dhcp = DISABLED
Wed Apr 15 13:33:40 2015 us=594772   max_routes = 100
Wed Apr 15 13:33:40 2015 us=594785   allow_pull_fqdn = DISABLED
Wed Apr 15 13:33:40 2015 us=594799   route 10.8.0.0/255.255.255.0/nil/nil
Wed Apr 15 13:33:40 2015 us=594812   management_addr = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594826   management_port = 0
Wed Apr 15 13:33:40 2015 us=594839   management_user_pass = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594852   management_log_history_cache = 250
Wed Apr 15 13:33:40 2015 us=594873   management_echo_buffer_size = 100
Wed Apr 15 13:33:40 2015 us=594887   management_write_peer_info_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594900   management_client_user = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594914   management_client_group = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594927   management_flags = 0
Wed Apr 15 13:33:40 2015 us=594940   shared_secret_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=594953   key_direction = 0
Wed Apr 15 13:33:40 2015 us=594966   ciphername_defined = ENABLED
Wed Apr 15 13:33:40 2015 us=594979   ciphername = 'BF-CBC'
Wed Apr 15 13:33:40 2015 us=594992   authname_defined = ENABLED
Wed Apr 15 13:33:40 2015 us=595005   authname = 'SHA1'
Wed Apr 15 13:33:40 2015 us=595018   prng_hash = 'SHA1'
Wed Apr 15 13:33:40 2015 us=595031   prng_nonce_secret_len = 16
Wed Apr 15 13:33:40 2015 us=595043   keysize = 0
Wed Apr 15 13:33:40 2015 us=595083   engine = DISABLED
Wed Apr 15 13:33:40 2015 us=595102   replay = ENABLED
Wed Apr 15 13:33:40 2015 us=595116   mute_replay_warnings = DISABLED
Wed Apr 15 13:33:40 2015 us=595129   replay_window = 64
Wed Apr 15 13:33:40 2015 us=595142   replay_time = 15
Wed Apr 15 13:33:40 2015 us=595155   packet_id_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595167   use_iv = ENABLED
Wed Apr 15 13:33:40 2015 us=595180   test_crypto = DISABLED
Wed Apr 15 13:33:40 2015 us=595193   tls_server = ENABLED
Wed Apr 15 13:33:40 2015 us=595206   tls_client = DISABLED
Wed Apr 15 13:33:40 2015 us=595219   key_method = 2
Wed Apr 15 13:33:40 2015 us=595232   ca_file = '/etc/openvpn/ca.crt'
Wed Apr 15 13:33:40 2015 us=595245   ca_path = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595258   dh_file = '/etc/openvpn/dh2048.pem'
Wed Apr 15 13:33:40 2015 us=595272   cert_file = '/etc/openvpn/server.crt'
Wed Apr 15 13:33:40 2015 us=595285   priv_key_file = '/etc/openvpn/server.key'
Wed Apr 15 13:33:40 2015 us=595298   pkcs12_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595311   cipher_list = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595324   tls_verify = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595337   tls_export_cert = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595350   verify_x509_type = 0
Wed Apr 15 13:33:40 2015 us=595363   verify_x509_name = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595376   crl_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595389   ns_cert_type = 0
Wed Apr 15 13:33:40 2015 us=595402   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595416   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595429   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595442   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595454   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595467   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595480   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595493   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595506   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595519   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595532   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595545   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595557   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595570   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595583   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595596   remote_cert_ku[i] = 0
Wed Apr 15 13:33:40 2015 us=595609   remote_cert_eku = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595622   ssl_flags = 0
Wed Apr 15 13:33:40 2015 us=595634   tls_timeout = 2
Wed Apr 15 13:33:40 2015 us=595647   renegotiate_bytes = 0
Wed Apr 15 13:33:40 2015 us=595660   renegotiate_packets = 0
Wed Apr 15 13:33:40 2015 us=595673   renegotiate_seconds = 3600
Wed Apr 15 13:33:40 2015 us=595686   handshake_window = 60
Wed Apr 15 13:33:40 2015 us=595699   transition_window = 3600
Wed Apr 15 13:33:40 2015 us=595711   single_session = DISABLED
Wed Apr 15 13:33:40 2015 us=595725   push_peer_info = DISABLED
Wed Apr 15 13:33:40 2015 us=595738   tls_exit = DISABLED
Wed Apr 15 13:33:40 2015 us=595751   tls_auth_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=595764   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595786   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595800   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595813   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595826   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595840   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595853   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595866   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595879   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595892   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595905   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595918   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595931   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595945   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595958   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595971   pkcs11_protected_authentication = DISABLED
Wed Apr 15 13:33:40 2015 us=595986   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596000   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596013   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596027   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596040   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596053   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596098   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596112   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596125   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596138   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596152   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596165   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596178   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596191   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596204   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596217   pkcs11_private_mode = 00000000
Wed Apr 15 13:33:40 2015 us=596230   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596243   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596256   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596269   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596282   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596295   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596308   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596321   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596334   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596347   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596360   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596373   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596386   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596399   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596412   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596425   pkcs11_cert_private = DISABLED
Wed Apr 15 13:33:40 2015 us=596438   pkcs11_pin_cache_period = -1
Wed Apr 15 13:33:40 2015 us=596451   pkcs11_id = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=596464   pkcs11_id_management = DISABLED
Wed Apr 15 13:33:40 2015 us=596480   server_network = 10.8.0.0
Wed Apr 15 13:33:40 2015 us=596495   server_netmask = 255.255.255.0
Wed Apr 15 13:33:40 2015 us=596512   server_network_ipv6 = ::
Wed Apr 15 13:33:40 2015 us=596525   server_netbits_ipv6 = 0
Wed Apr 15 13:33:40 2015 us=596540   server_bridge_ip = 0.0.0.0
Wed Apr 15 13:33:40 2015 us=596554   server_bridge_netmask = 0.0.0.0
Wed Apr 15 13:33:40 2015 us=596568   server_bridge_pool_start = 0.0.0.0
Wed Apr 15 13:33:40 2015 us=596583   server_bridge_pool_end = 0.0.0.0
Wed Apr 15 13:33:40 2015 us=596604   push_entry = 'route 192.168.10.0 255.255.255.0'
Wed Apr 15 13:33:40 2015 us=596619   push_entry = 'redirect-gateway def1 bypass-dhcp'
Wed Apr 15 13:33:40 2015 us=596632   push_entry = 'dhcp-option DNS 8.8.8.8'
Wed Apr 15 13:33:40 2015 us=596645   push_entry = 'dhcp-option DNS 8.8.4.4'
Wed Apr 15 13:33:40 2015 us=596658   push_entry = 'route 10.8.0.1'
Wed Apr 15 13:33:40 2015 us=596671   push_entry = 'topology net30'
Wed Apr 15 13:33:40 2015 us=596685   push_entry = 'ping 10'
Wed Apr 15 13:33:40 2015 us=596710   push_entry = 'ping-restart 120'
Wed Apr 15 13:33:40 2015 us=596725   ifconfig_pool_defined = ENABLED
Wed Apr 15 13:33:40 2015 us=596740   ifconfig_pool_start = 10.8.0.4
Wed Apr 15 13:33:40 2015 us=596754   ifconfig_pool_end = 10.8.0.251
Wed Apr 15 13:33:40 2015 us=596769   ifconfig_pool_netmask = 0.0.0.0
Wed Apr 15 13:33:40 2015 us=596782   ifconfig_pool_persist_filename = 'ipp.txt'
Wed Apr 15 13:33:40 2015 us=596795   ifconfig_pool_persist_refresh_freq = 600
Wed Apr 15 13:33:40 2015 us=596808   ifconfig_ipv6_pool_defined = DISABLED
Wed Apr 15 13:33:40 2015 us=596822   ifconfig_ipv6_pool_base = ::
Wed Apr 15 13:33:40 2015 us=596836   ifconfig_ipv6_pool_netbits = 0
Wed Apr 15 13:33:40 2015 us=596849   n_bcast_buf = 256
Wed Apr 15 13:33:40 2015 us=596862   tcp_queue_limit = 64
Wed Apr 15 13:33:40 2015 us=596875   real_hash_size = 256
Wed Apr 15 13:33:40 2015 us=596888   virtual_hash_size = 256
Wed Apr 15 13:33:40 2015 us=596901   client_connect_script = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=596914   learn_address_script = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=596927   client_disconnect_script = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=596940   client_config_dir = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=596953   ccd_exclusive = DISABLED
Wed Apr 15 13:33:40 2015 us=596967   tmp_dir = '/tmp'
Wed Apr 15 13:33:40 2015 us=596979   push_ifconfig_defined = DISABLED
Wed Apr 15 13:33:40 2015 us=596994   push_ifconfig_local = 0.0.0.0
Wed Apr 15 13:33:40 2015 us=597008   push_ifconfig_remote_netmask = 0.0.0.0
Wed Apr 15 13:33:40 2015 us=597022   push_ifconfig_ipv6_defined = DISABLED
Wed Apr 15 13:33:40 2015 us=597036   push_ifconfig_ipv6_local = ::/0
Wed Apr 15 13:33:40 2015 us=597050   push_ifconfig_ipv6_remote = ::
Wed Apr 15 13:33:40 2015 us=597093   enable_c2c = DISABLED
Wed Apr 15 13:33:40 2015 us=597107   duplicate_cn = ENABLED
Wed Apr 15 13:33:40 2015 us=597120   cf_max = 0
Wed Apr 15 13:33:40 2015 us=597133   cf_per = 0
Wed Apr 15 13:33:40 2015 us=597146   max_clients = 1024
Wed Apr 15 13:33:40 2015 us=597159   max_routes_per_client = 256
Wed Apr 15 13:33:40 2015 us=597172   auth_user_pass_verify_script = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=597186   auth_user_pass_verify_script_via_file = DISABLED
Wed Apr 15 13:33:40 2015 us=597199   port_share_host = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=597212   port_share_port = 0
Wed Apr 15 13:33:40 2015 us=597225   client = DISABLED
Wed Apr 15 13:33:40 2015 us=597237   pull = DISABLED
Wed Apr 15 13:33:40 2015 us=597251   auth_user_pass_file = '[UNDEF]'
Wed Apr 15 13:33:40 2015 us=597266 OpenVPN 2.3.6 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec  2 2014
Wed Apr 15 13:33:40 2015 us=597291 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Wed Apr 15 13:33:40 2015 us=597517 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Wed Apr 15 13:33:40 2015 us=597748 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Wed Apr 15 13:33:40 2015 us=616662 Diffie-Hellman initialized with 2048 bit key
Wed Apr 15 13:33:40 2015 us=617812 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Apr 15 13:33:40 2015 us=617900 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed Apr 15 13:33:40 2015 us=618209 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:74:07:be
Wed Apr 15 13:33:40 2015 us=618663 TUN/TAP device tun0 opened
Wed Apr 15 13:33:40 2015 us=618696 TUN/TAP TX queue length set to 100
Wed Apr 15 13:33:40 2015 us=618721 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 15 13:33:40 2015 us=618763 /usr/sbin/ip link set dev tun0 up mtu 1500
Wed Apr 15 13:33:40 2015 us=623293 /usr/sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Wed Apr 15 13:33:40 2015 us=630571 /usr/sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Apr 15 13:33:40 2015 us=632865 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 15 13:33:40 2015 us=638178 GID set to nobody
Wed Apr 15 13:33:40 2015 us=638315 UID set to nobody
Wed Apr 15 13:33:40 2015 us=638380 Listening for incoming TCP connection on [AF_INET]192.168.0.36:1194
Wed Apr 15 13:33:40 2015 us=638434 TCPv4_SERVER link local (bound): [AF_INET]192.168.0.36:1194
Wed Apr 15 13:33:40 2015 us=638451 TCPv4_SERVER link remote: [undef]
Wed Apr 15 13:33:40 2015 us=638474 MULTI: multi_init called, r=256 v=256
Wed Apr 15 13:33:40 2015 us=638587 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Apr 15 13:33:40 2015 us=638619 IFCONFIG POOL LIST
Wed Apr 15 13:33:40 2015 us=638673 MULTI: TCP INIT maxclients=1024 maxevents=1028
Wed Apr 15 13:33:40 2015 us=638745 Initialization Sequence Completed
[root@OpenVPN log]#

maikcat

please post the output of:

netstat -nr
ifconfig
iptables -L -t nat
iptables -L

on your openvpn server.

Michael.

shazzad0c

Thanks for the quick reply...

netstat -nr
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
0.0.0.0         192.168.0.1     0.0.0.0         UG        0 0          0 eth0
0.0.0.0         192.168.0.1     0.0.0.0         UG        0 0          0 eth1
10.8.0.0        10.8.0.2        255.255.255.0   UG        0 0          0 tun0
10.8.0.2        0.0.0.0         255.255.255.255 UH        0 0          0 tun0
192.168.0.0     0.0.0.0         255.255.255.0   U         0 0          0 eth1
192.168.0.0     0.0.0.0         255.255.255.0   U         0 0          0 eth0

ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.0.35  netmask 255.255.255.0  broadcast 192.168.0.255
        inet6 fe80::20c:29ff:fe74:7be  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:74:07:be  txqueuelen 1000  (Ethernet)
        RX packets 14402  bytes 2028961 (1.9 MiB)
        RX errors 0  dropped 22  overruns 0  frame 0
        TX packets 1255  bytes 101341 (98.9 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.0.36  netmask 255.255.255.0  broadcast 192.168.0.255
        inet6 fe80::20c:29ff:fe74:7c8  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:74:07:c8  txqueuelen 1000  (Ethernet)
        RX packets 28137  bytes 3285312 (3.1 MiB)
        RX errors 0  dropped 22  overruns 0  frame 0
        TX packets 13791  bytes 2253553 (2.1 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 0  (Local Loopback)
        RX packets 28  bytes 2536 (2.4 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 28  bytes 2536 (2.4 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.8.0.1  netmask 255.255.255.255  destination 10.8.0.2
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 140  bytes 8635 (8.4 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination

iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

maikcat

why do you have your 2 nics with different ips in the same ip range?

also you do have 2 gateways... :roll:

can you for testing disable the one nic?

Michael.

shazzad0c

I will disable one of the Ethernet ports and give it another try. I'll post the results shortly.

I have two nics as I was wanting to setup eth0 for O&M access, and then use eth1 for VPN connections. Both are currently on the same subnet/ip range, but I may change that in the future.

As for the two gateways, I only have the one... 192.168.0.1, not really sure what 10.8.0.2 is... I suspect that's from OpenVPN and tun0 interface.

shazzad0c

Hmmm... Disabled eth0, and it now connects successfully.

So many can't have two Ethernet ports in the same subnet or network?

After the client connects, I don't have any internet access, nor can I connect to other elements within my network. Do I need to add in some routes to do so?

maikcat

So many can't have two Ethernet ports in the same subnet or network?

if you want load balancing or failover you do need to enable the necessary kernel modules...
otherwise its a bad practice

I don't have any internet access, nor can I connect to other elements within my network

you do need to enable ip forwarding & NAT on your server...

Michael.

shazzad0c

Maikcat, thanks very much... All working now.

I enabled iptables, and everything is working. Internet access and I can access a few elements witching my network.

Now to get everything working with two Ethernet cards. I didn't want to load balance or setup a redundant/failover interface. I just wanted to seperate O&M/ssh access as opposed to the VPN traffic from over the web.

I think having both interfaces on the same network or subnet was the issue. If I out one of the interfaces on another subnet, I'm assuming everything should work as is.

I'll give this a try over the next few days and post my results.

Thanks again for your assistance.

shazzad0c

Ahhh... no matter what I try I cannot workout how to separate traffic on my two ethernet interfaces.

I want to keep eth0 to be used just within my LAN internally; so SSH access etc.
I want to use eth1 for VPN traffic... so all traffic in and back out towards the internet, and any jumps to other servers/elements within my network.

Basically I want all traffic originating from either interface to stay on that interface.

What I'm finding is that all traffic that originates on eth0 remains on that interface (that's ok), but any traffic that comes in from eth1 returns back via eth0.

I understand that both interfaces are on the same subnet, and have the same gateway... but surely it can't be that difficult to do.

I've spent countless hours, read many websites, and still not getting anywhere.

I thought http://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/ this line would help me... but it doesn't seem to be any help.

Any help from the community would be great!